Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/udPPS2sYrB_4pLCgmF2S9ojs5jY.roa
File: udPPS2sYrB_4pLCgmF2S9ojs5jY.roa (raw, json)
Hash identifier: B+NHZTZ8oWrjZYcjGCZ1w1H7M3IElUb21VQaoErFapU=
Subject key identifier: B9:D3:CF:4B:6B:18:AC:1F:F8:A4:B0:A0:98:5D:92:F6:88:EC:E6:36
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB5CC7CE6630EDA509025065D8C1340
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/udPPS2sYrB_4pLCgmF2S9ojs5jY.roa
Signing time: Tue 06 Feb 2024 18:37:17 +0000
ROA not before: Tue 06 Feb 2024 18:37:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198079
IP address blocks: 2a0f:b241:12a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b5:cc:7c:e6:63:0e:da:50:90:25:06:5d:8c:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:37:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9d3cf4b6b18ac1ff8a4b0a0985d92f688ece636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:63:41:15:e2:d2:05:85:29:a3:7e:92:f4:
4b:9a:b7:d9:ce:1c:15:86:38:2d:06:3a:5c:71:5a:
79:ec:64:53:7e:58:95:c4:a4:10:be:06:a5:7f:cd:
09:60:6f:9f:c3:fc:d6:dd:29:d5:47:eb:d0:a4:1e:
a3:b4:f4:fb:4e:19:60:ca:35:19:45:75:4d:30:0b:
e8:66:a4:6a:ce:7c:4b:0a:15:12:67:52:74:0b:37:
1a:59:a9:97:3c:83:7a:05:b9:80:87:66:3e:b9:7f:
ed:48:1c:a3:42:1e:76:ad:c1:b3:19:f0:ec:e2:78:
da:53:11:7a:24:36:4e:36:1d:55:25:99:82:d4:99:
7a:69:48:f6:95:c9:08:04:12:49:fe:71:62:26:42:
2c:06:f6:2c:22:ba:9f:e8:16:47:17:31:05:25:ea:
2a:33:81:3e:c3:0c:3f:19:38:f2:cd:2a:7d:21:45:
ba:18:cc:a3:28:45:8a:b4:74:4e:4a:4a:48:b3:4d:
f8:0c:ad:7c:48:3b:c1:4a:5e:92:e1:a2:c0:0a:68:
47:9b:44:79:4b:53:30:d1:0c:1b:32:30:b0:f9:9d:
e5:c4:3c:87:ae:78:47:d4:8e:c4:7f:c2:8a:81:c1:
e0:04:aa:d9:99:a2:0b:a7:68:ef:51:e5:7a:0f:36:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D3:CF:4B:6B:18:AC:1F:F8:A4:B0:A0:98:5D:92:F6:88:EC:E6:36
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/udPPS2sYrB_4pLCgmF2S9ojs5jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12a::/48
Signature Algorithm: sha256WithRSAEncryption
43:2f:b0:14:cc:72:78:73:22:af:38:53:05:53:06:b4:3f:de:
7b:a6:3d:cf:99:92:a5:b4:5a:2e:f6:f7:ef:2c:cb:81:e1:82:
6e:4d:89:ad:df:e9:74:7d:b0:e3:96:03:9b:f6:9d:0f:a7:22:
45:b2:73:21:f0:0e:81:90:86:be:97:9c:73:05:5b:6f:b4:22:
5e:9a:d6:26:8b:6f:d9:ec:a7:84:9c:3c:ef:87:4e:e1:f0:0b:
45:15:b0:8e:81:0d:36:8c:60:d9:e9:69:22:ec:04:49:b5:08:
cf:09:6f:39:88:ee:04:96:1a:f8:f4:cc:da:20:c0:95:56:c1:
be:db:c1:b1:8d:36:fb:66:e9:e8:aa:0c:5d:ba:13:96:77:07:
77:24:be:c4:35:27:e1:66:67:7e:95:4c:78:6b:90:66:30:6b:
39:d4:6d:21:ce:25:96:df:9d:41:b5:e3:d9:e0:74:e6:62:04:
1d:fe:91:cb:00:02:bc:c2:e6:40:1d:23:c8:5d:02:4b:01:64:
88:13:fd:cd:0e:f9:c9:cd:30:28:f3:c9:a6:90:5a:10:b8:de:
5f:26:0d:d9:b5:c6:90:17:dc:de:78:ca:7a:96:56:2c:23:20:
09:e0:ec:ff:a7:1b:7b:82:74:1d:aa:ec:ba:1f:b9:9f:ff:1a:
8c:91:ed:69
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/tcx85mMO2lCQJQZdjBNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgzNzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWQzY2Y0YjZiMThhYzFmZjhhNGIwYTA5ODVkOTJmNjg4ZWNlNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknpjQRXi0gWFKaN+kvRLmrfZzhwV
hjgtBjpccVp57GRTfliVxKQQvgalf80JYG+fw/zW3SnVR+vQpB6jtPT7ThlgyjUZ
RXVNMAvoZqRqznxLChUSZ1J0CzcaWamXPIN6BbmAh2Y+uX/tSByjQh52rcGzGfDs
4njaUxF6JDZONh1VJZmC1Jl6aUj2lckIBBJJ/nFiJkIsBvYsIrqf6BZHFzEFJeoq
M4E+www/GTjyzSp9IUW6GMyjKEWKtHROSkpIs034DK18SDvBSl6S4aLACmhHm0R5
S1Mw0QwbMjCw+Z3lxDyHrnhH1I7Ef8KKgcHgBKrZmaILp2jvUeV6Dzba9wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLnTz0trGKwf+KSwoJhdkvaI7OY2MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvdWRQUFMyc1lyQl80cExDZ21GMlM5b2pzNWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQEq
MA0GCSqGSIb3DQEBCwUAA4IBAQBDL7AUzHJ4cyKvOFMFUwa0P957pj3PmZKltFou
9vfvLMuB4YJuTYmt3+l0fbDjlgOb9p0PpyJFsnMh8A6BkIa+l5xzBVtvtCJemtYm
i2/Z7KeEnDzvh07h8AtFFbCOgQ02jGDZ6Wki7ARJtQjPCW85iO4Elhr49MzaIMCV
VsG+28GxjTb7ZunoqgxduhOWdwd3JL7ENSfhZmd+lUx4a5BmMGs51G0hziWW351B
tePZ4HTmYgQd/pHLAAK8wuZAHSPIXQJLAWSIE/3NDvnJzTAo88mmkFoQuN5fJg3Z
tcaQF9zeeMp6llYsIyAJ4Oz/pxt7gnQdquy6H7mf/xqMke1p
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org